Most Dangerous APT Hacker Group's Deadly Cyber Attacks of the Year 2021- Complete Collection

The APT advanced chronic possibility is known for launching refined attacks to rob pleasing, financial knowledge and cease undetected throughout the infrastructure. Listed here, we detect a listing of APT attacks from 2019 to 2021.

These hacker teams essentially aim enterprises despite the Industry, their targets encompass government, defense, financial services, upright services, industrial, telecoms, client goods and many extra.

The APT team entails experienced cybercriminals who can bypass safety provisions and reason as hurt and disruption as doable. These APT teams bear a particular aim they utilize time to detect them they customarily exploit them to cancel entry.

Many of the APT teams use personalized malware to waft under the radar. The APT attack classified into reasonably a type of phases including Planning the attack, mapping company knowledge, avoiding detection and compromising the community.

Unhealthy APT Hacker Community Attacks 2019

January

February

March

April

Might per chance likely additionally

June

July

August

September

October

November

December

2020 Attack checklist So Far

January

February

March

1. Mar 30 – The ‘Glance Cloud’ Operation: Geumseong121 team carries out the APT attack disguising the evidence of North Korean defection
2. Mar 26 –  iOS exploit chain deploys LightSpy characteristic-wealthy malware
3. Mar 25 – This Is No longer a Test: APT41 Initiates World Intrusion Campaign Using A whole lot of Exploits
4. Mar 24 – WildPressure targets industrial-linked entities within the Heart East
5. Mar 24 –  Operation Poisoned Facts: Hong Kong Customers Centered With Mobile Malware thru Local Facts Hyperlinks
6. Mar 19 – Probing Pawn Storm : Cyberespionage Campaign Thru Scanning, Credential Phishing and More
7. Mar 15 –  APT36 jumps on the coronavirus bandwagon, delivers Crimson RAT
8. Mar 12 – Vicious Panda: The COVID Campaign
9. Mar 12 –Two-tailed scorpion APT-C-23
10. Mar 12 – Monitoring Turla: Original backdoor delivered thru Armenian watering holes
11. Mar 11 – Operation Overtrap Targets Japanese On-line Banking Customers By the use of Bottle Exploit Equipment and Mark-Original Cinobi Banking Trojan
12. Mar 10 – WHO’S HACKING THE HACKERS: NO HONOR AMONG THIEVES
13. Mar 05 – Dissecting Geost: Exposing the Anatomy of the Android Trojan Concentrating on Russian Banks
14. Mar 05 – Guildma: The Devil drives electric
15. Mar 03 –  Original Perl Botnet (Tuyul) Chanced on with That you just’ll be in a position to imagine Indonesian Attribution
16. Mar 03 – The North Korean Kimsuky APT retains threatening South Korea evolving its TTPs
17. Mar 02 – APT34 (AKA OILRIG, AKA HELIX KITTEN) ATTACKS LEBANON GOVERNMENT ENTITIES WITH MAILDROPPER IMPLANTS

April

1. Apr 29 –  Chinese language Affect Operations Evolve in Campaigns Concentrating on Taiwanese Elections, Hong Kong Protests
2. Apr 28 – Outlaw is Befriend, a Original Crypto-Botnet Targets European Organizations
3. Apr 28 – Grandoreiro: How engorged can an EXE catch?
4. Apr 24 – PoshC2
5. Apr 21 –  Negative Peek Chance Actor Resurfaces with iOS Exploit and Up up to now Implant
6. Apr 20 –  WINNTI GROUP: Insights From the Past
7. Apr 17 – Gamaredon APT Community Exercise Covid-19 Entice in Campaigns
8. Apr 16 –  Exposing Modular Adware: How DealPly, IsErIk, and ManageX Persist in Systems
9. Apr 16 – Giving Fraudsters the Frosty Shoulder: Contained within the Greatest Linked TV Bot Attack
10. Apr 16 – Taiwan Excessive-Tech Ecosystem Centered by International APT Community
11. Apr 15 – Nation-inform Mobile Malware Targets Syrians with COVID-19 Lures
12. Apr 15 – Craft for Resilience: APT Community Chimera
13. Apr 07 –APTs and COVID-19: How advanced chronic threats use the coronavirus as a lure
14. Apr 07 –Original Ursnif Campaign: A Shift from PowerShell to Mshta
15. Apr 07 – Decade of the RATs: Original APT Attacks Concentrating on Linux, Windows and Android

Might per chance likely additionally

• Might per chance likely additionally 29 – Russian Cyber Attack Campaigns and Actors
• Might per chance likely additionally 28 – The zero-day exploits of Operation WizardOpium
• Might per chance likely additionally 26 –  From Agent.BTZ to ComRAT v4: A ten‑year whisk
• Might per chance likely additionally 21 – The Evolution of APT15’s Codebase 2020
• Might per chance likely additionally 21 –  Iranian Chafer APT Centered Air Transportation and Authorities in Kuwait and Saudi Arabia
• Might per chance likely additionally 21 – No “Sport over” for the Winnti Community
• Might per chance likely additionally 19 –  Subtle Espionage Community Turns Attention to Telecom Suppliers in South Asia
• Might per chance likely additionally 18 –  APT-C-23 center East
• Might per chance likely additionally 14 –  LOLSnif – Monitoring One other Ursnif-Based mostly Centered Campaign
• Might per chance likely additionally 14 – RATicate: an attacker’s waves of files-stealing malware
• Might per chance likely additionally 14 –  Vendetta-recent possibility actor from Europe
• Might per chance likely additionally 14 –  Mikroceen: Spying backdoor leveraged in high‑profile networks in Central Asia
• Might per chance likely additionally 14 –APT Community Planted Backdoors Concentrating on Excessive Profile Networks in Central Asia
• Might per chance likely additionally 14 – COMpfun authors spoof visa utility with HTTP station-essentially based fully Trojan
• Might per chance likely additionally 13 – Ramsay: A cyber‑espionage toolkit tailored for air‑gapped networks
• Might per chance likely additionally 12 –Tropic Trooper’s Befriend: USBferry Attack Targets Air-gapped Environments
• Might per chance likely additionally 11 – Centered Attacks on Indian Authorities and Monetary Institutions Using the JsOutProx RAT
• Might per chance likely additionally 11 – Up up to now BackConfig Malware Concentrating on Authorities and Defense pressure Organizations in South Asia
• Might per chance likely additionally 07 –  Introducing Blue Mockingbird
• Might per chance likely additionally 07 – Naikon APT: Cyber Espionage Reloaded
• Might per chance likely additionally 06 – Phantom within the Divulge Shell
• Might per chance likely additionally 06 –  Leery Turtle Chance Legend
• Might per chance likely additionally 05 – Nazar: Spirits of the Past

June

1. Jun 30 –  StrongPity APT – Revealing Trojanized Tools, Working Hours and Infrastructure
2. Jun 29 –  PROMETHIUM extends world reach with StrongPity3 APT
3. Jun 26 – WastedLocker: Symantec Identifies Wave of Attacks In opposition to U.S. Organizations
4. Jun 25 – A end quiz on the advanced methods susceptible in a Malaysian-centered APT campaign
5. Jun 24 – BRONZE VINEWOOD Targets Present Chains
6. Jun 23 – WastedLocker: A Original Ransomware Variant Developed By The Negative Corp Community
7. Jun 19 – Centered Attack Leverages India-China Border Dispute to Entice Victims
8. Jun 18 – Digging up InvisiMole’s hidden arsenal
9. Jun 17 –  Operation In(ter)ception: Aerospace and militia corporations within the crosshairs of cyberspies
10. Jun 17 – AcidBox: Rare Malware Repurposing Turla Community Exploit Centered Russian Organizations
11. Jun 17 –  Multi-stage APT attack drops Cobalt Strike the use of Malleable C2 characteristic
12. Jun 16 – Cobalt: methods and instruments replace
13. Jun 15 –  India: Human Rights Defenders Centered by a Coordinated Spyware and adware Operation
14. Jun 11 – Original Android Spyware and adware ActionSpy Revealed thru Phishing Attacks from Earth Empusa
15. Jul 11 –  Gamaredon team grows its sport
16. Jun 08 – TA410: The Community In the help of LookBack Attacks In opposition to U.S. Utilities Sector Returns with Original Malware
17. Jun 08 – GuLoader? No, CloudEyE
18. Jun 03 – Original LNK attack tied to Higaisa APT chanced on
19. Jun 03 –  Cycldek: Bridging the (air) gap

July

1. Jul 29 – Operation North Star: A Job Supply That’s Too Staunch to be Factual?
2. Jul 22 –  OilRig Targets Heart Eastern Telecommunications Group and Provides Original C2 Channel with Steganography to Its Inventory
3. Jul 22 –MATA: Multi-platform centered malware framework
4. Jul 15 – THE FAKE CISCO: Hunting for backdoors in Unfounded Cisco devices
5. Jul 14 –  TURLA / VENOMOUS BEAR UPDATES ITS ARSENAL: “NEWPASS” APPEARS ON THE APT THREAT SCENE
6. Jul 14 – Welcome Chat as a stable messaging app? Nothing will seemingly be additional from the reality
7. Jul 12 –  SideWinder 2020 H1
8. Jul 09 – Cosmic Lynx: The Upward push of Russian BEC
9. Jul 09 –More cross: A deep quiz at Evilnum and its toolset
10. Jul 08 –  Reproduction cat of APT Sidewinder ?
11. Jul 08 – [proofpoint] TA410: The Community In the help of LookBack Attacks In opposition to U.S. Utilities Sector Returns with Original Malware
12. Jul 08 – Operation ‘Honey Entice’: APT36 Targets Defense Organizations in India
13. Jul 06 –  North Korean hackers are skimming US and European purchasers
14. Jul 01 – [Lookout] Mobile APT Surveillance Campaigns Concentrating on Uyghurs

1. Aug 27 – The Kittens Are Befriend in Metropolis 3
2. Aug 28 – Clear Tribe: Evolution prognosis, fragment 2
3. Aug 20 – DEVELOPMENT OF THE ACTIVITY OF THE TA505 CYBERCRIMINAL GROUP
4. Aug 20 –More Proof of APT Hackers-for-Hire Outmoded for Industrial Espionage
5. Aug 18 – [F-Secure] LAZARUS GROUP CAMPAIGN TARGETING THE CRYPTOCURRENCY VERTICAL
6. Aug 13 – [Kaspersky] CactusPete APT team’s up up to now Bisonal backdoor
7. Aug 13 – [ClearSky] Operation ‘Dream Job’ Standard North Korean Espionage Campaign
8. Aug 12 – [Kaspersky] Web Explorer and Windows zero-day exploits susceptible in Operation PowerFall
9. Aug 10 – [Seqrite] Gorgon APT focusing on MSME sector in India

September

1. Sep 30 – APT‑C‑23 team evolves its Android spyware and spyware and adware
2. Sep 29 –  Palmerworm: Espionage Gang Targets the Media, Finance, and Other Sectors
3. Sep 29 –  ShadowPad: recent verbalize from the Winnti team
4. Sep 25 –  German-made FinSpy spyware and spyware and adware chanced on in Egypt, and Mac and Linux versions printed
5. Sep 25 –APT-C-43 steals Venezuelan militia secrets to give intelligence toughen for the reactionaries — HpReact campaign
6. Sep 24 – detecting empires within the cloud
7. Sep 23 –Operation SideCopy
8. Sep 22 – APT28 Delivers Zebrocy Malware Campaign the use of NATO Theme as Entice
9. Sep 17 –  Operation Tibbar
10. Sep 08 –TeamTNT verbalize targets Weave Scope deployments
11. Sep 03 –  NO REST FOR THE WICKED: EVILNUM UNLEASHES PYVIL RAT
12. Sep 01 –Chinese language APT TA413 Resumes Concentrating on of Tibet Following COVID-19 Themed Financial Espionage Campaign Turning in Sepulcher Malware Concentrating on Europe

October

1. Oct 27 – North Korean Developed Continual Chance Focal point: Kimsuky
2. Oct 23 – APT-C-44 NAFox
3. Oct 22 – Bitter CHM
4. Oct 19 –Operation Earth Kitsune: Monitoring SLUB’s Present Operations
5. Oct 15 – Operation Quicksand – MuddyWater’s Offensive Attack In opposition to Israeli Organizations
6. Oct 14 – [MalwareByte] Nonetheless Librarian APT honest on schedule for 20/21 academic year
7. Oct 13 – [WeiXin] Operation Rubia cordifolia
8. Oct 07 – [BlackBerry] BlackBerry Uncovers Big Hack-For-Hire Community Concentrating on Governments, Businesses, Human Rights Groups and Influential Folk
9. Oct 06 – [Malwarebytes] Release the Kraken: Fileless APT attack abuses Windows Error Reporting provider
10. Oct 05 – [Kaspersky] MosaicRegressor: Lurking within the Shadows of UEFI

November

• Nov 17 –  CHAES: Original Malware Concentrating on Latin American E-Commerce
• Nov 17 – Japan-Linked Organizations Centered in Long-Running and Subtle Attack Campaign
• Nov 16 –  TA505: A Brief Historical past Of Their Time
• Nov 16 – A Detailed Timeline of a Chinese language APT Espionage Attack Concentrating on South Eastern Asian Authorities Institutions
• Nov 12 – CRAT wishes to plunder your endpoints
• Nov 12 –  The CostaRicto Campaign: Cyber-Espionage Outsourced
• Nov 12 –
• Nov 10 – Original APT32 Malware Campaign Targets Cambodian Authorities
• Nov 06 – [Volexity] OceanLotus: Extending Cyber Espionage Operations Thru Unfounded Internet sites
• Nov 04 – [Sophos] A recent APT uses DLL facet-hundreds to “KilllSomeOne”
• Nov 01 – [Cyberstanc] A seek for into APT36’s (Clear Tribe) tradecraft

December

• Dec 30 – [Recorded Future] SolarWinds Attribution: Are We Getting Sooner than Ourselves?
• Dec 29 – [Uptycs] Revenge RAT focusing on users in South The US
• Dec 23 – [Kaspersky] Lazarus covets COVID-19-linked intelligence
• Dec 22 – [Truesec] Collaboration between FIN7 and the RYUK team, a Truesec Investigation
• Dec 19 – [VinCSS] Inspecting recent malware of China Panda hacker team at possibility of attack present chain in opposition to Vietnam Authorities Certification Authority
• Dec 17 – [ClearSky] Pay2Kitten
• Dec 17 – [ESET] Operation SignSight: Present‑chain attack in opposition to a certification authority in Southeast Asia
• Dec 16 – [Team Cymru] Mapping out AridViper Infrastructure Using Augury’s Malware Module
• Dec 15 – [WeiXin] APT-C-47 ClickOnce Operation
• Dec 15 – [hvs consulting] Greetings from Lazarus Anatomy of a cyber espionage campaign
• Dec 13 – [Fireeye] Highly Evasive Attacker Leverages SolarWinds Present Chain to Compromise A whole lot of World Victims With SUNBURST Backdoor
• Dec 09 – [Trend Micro] SideWinder Uses South Asian Disorders for Spear Phishing, Mobile Attacks
• Dec 07 – [Group-IB] The footprints of Raccoon: a legend about operators of JS-sniffer FakeSecurity distributing Raccoon stealer
• Dec 02 – [ESET] Turla Crutch: Preserving the “help door” originate
• Dec 03 – [Telsy] Adversary Monitoring Legend
• Dec 01 – [CISA] Developed Continual Chance Actors Concentrating on U.S. Mediate Tanks
• Dec 01 – [Prevasio] OPERATION RED KANGAROO: INDUSTRY’S FIRST DYNAMIC ANALYSIS OF 4M PUBLIC DOCKER CONTAINER IMAGES

2021 Attacks checklist So Far

January

• Jan 31 – [JPCERT] A41APT case ~ Evaluation of the Stealth APT Campaign Threatening Japan
• Jan 28 – [ClearSky] “Lebanese Cedar” APT: World Lebanese Espionage Campaign Leveraging Web Servers
• Jan 20 – [JPCERT] In most cases Known Tools Outmoded by Lazarus
• Jan 20 – [Cybie] A Deep Dive Into Patchwork APT Community
• Jan 14 – [Positive] Higaisa or Winnti? APT41 backdoors, susceptible and recent
• Jab 12 – [ESET] Operation Spalax: Centered malware attacks in Colombia
• Jan 12 – [Yoroi] Opening “STEELCORGI”: A Subtle APT Swiss Military Knife
• Jan 12 – [NCCgroup] Abusing cloud services to waft under the radar
• Jan 11 – [Palo Alto Networks] xHunt Campaign: Original BumbleBee Webshell and SSH Tunnels Outmoded for Lateral Bolt
• Jan 11 – [CrowdStrike] SUNSPOT: An Implant within the Gather Course of
• Jan 11 – [Kaspersky] Sunburst backdoor – code overlaps with Kazuar
• Jan 08 – [Certfa] Charming Kitten’s Christmas Gift
• Jan 07 – [Prodaft] Brunhilda DaaS Malware Evaluation Legend
• Jan 06 – [CISCO] A Deep Dive into Lokibot Infection Chain
• Jan 06 – [Malwarebytes] Retrohunting APT37: North Korean APT susceptible VBA self decode methodology to inject RokRat
• Jan 05 – [QuoIntelligence] ReconHellcat Uses NIST Theme as Entice To Raise Original BlackSoul Malware
• Jan 05 – [Trend Micro] Earth Wendigo Injects JavaScript Backdoor to Provider Worker for Mailbox Exfiltration
• Jan 04 – [CheckPoint] Stopping Serial Killer: Catching the Next Strike: Dridex
• Jan 04 – [Medium] APT27 Turns to Ransomware
• Jan 04 – [Nao-Sec] Royal Avenue! Re:Dive

Febrary

• Feb 28 – [Recorded Future] China-linked Community RedEcho Targets the Indian Strength Sector Amid Heightened Border Tensions
• Feb 25 – [Proofpoint] TA413 Leverages Original FriarFox Browser Extension to Aim the Gmail Accounts of World Tibetan Organizations
• Feb 25 – [Kaspersky] Lazarus targets defense change with ThreatNeedle
• Feb 25 – [TeamT5] APT10: Monitoring down the stealth verbalize of the A41APT campaign
• Feb 24 – [MalwareBytes] LazyScripter: From Empire to double RAT
• Feb 24 – [Amnesty] Click on and Bait: Vietnamese Human Rights Defenders Centered with Spyware and adware Attacks
• Feb 22 – [CheckPoint] The Memoir of Jian – How APT31 Stole and Outmoded an Unknown Equation Community 0-Day
• Feb 17 – [Cybleinc] Confucius APT Android Spyware and adware Targets Pakistani and Other South Asian Regions
• Feb 10 – [Lookout] Lookout Discovers Original Confucius APT Android Spyware and adware Linked to India-Pakistan Battle
• Feb 09 – [Palo Alto Networks] BendyBear: Original Chinese language Shellcode Linked With Cyber Espionage Community BlackTech
• Feb 08 – [CheckPoint] Home Kitten – An Internal Search on the Iranian Surveillance Operations
• Feb 03 – [Palo Alto Networks] Hildegard: Original TeamTNT Malware Concentrating on Kubernetes
• Feb 02 – [ESET] Kobalos – A complex Linux possibility to high efficiency computing infrastructure
• Feb 01 – [VinCSS] ElephantRAT (Kunming version): our most up-to-date chanced on RAT of Panda and the similarities with unprejudiced nowadays Smanager RAT
• Feb 01 – [ESET] Operation NightScout: Present‑chain attack targets on-line gaming in Asia

March

• Mar XX – [CSET] Lecturers, AI, and APTs
• Mar 30 – [Kaspersky] APT10: refined multi-layered loader Ecipekac chanced on in A41APT campaign
• Mar 30 – [proofpoint] BadBlood: TA453 Targets US and Israeli Scientific Learn Personnel in Credential Phishing Campaigns
• Mar 18 – [Prodaft] SilverFish Community Chance Actor Legend
• Mar 10 – [Bitdefender] FIN8 Returns with Improved BADHATCH Toolkit
• Mar 10 – [Intezer] Original Linux Backdoor RedXOR Seemingly Operated by Chinese language Nation-Relate Actor
• Mar 02 – [Volexity] Operation Change Marauder: Energetic Exploitation of A whole lot of Zero-Day Microsoft Change Vulnerabilities
• Mar 02 – [Microsoft] HAFNIUM focusing on Change Servers with 0-day exploits

April

• Apr 28 – [Fireeye] Ghostwriter Replace: Cyber Espionage Community UNC1151 Seemingly Conducts Ghostwriter Affect Task
• Apr 27 – [Positive] Lazarus Community Recruitment: Chance Hunters vs Head Hunters
• Apr 23 – [Bitdefender] NAIKON – Traces from a Defense pressure Cyber-Espionage Operation
• Apr 23 – [Darktrace] APT35 ‘Charming Kitten’ chanced on in a pre-contaminated atmosphere
• Apr 20 – [FireEye] Test Your Pulse: Suspected APT Actors Leverage Authentication Bypass Systems and Pulse Trusty Zero-Day
• Apr 19 – [SentinelOne] A Deep Dive into Zebrocy’s Dropper Docs
• Apr 19 – [MalwareBytes] Lazarus APT conceals malicious code within BMP image to tumble its RAT
• Apr 13 – [Sentire] Hackers Flood the Web with 100,000 Malicious Pages, Promising Experts Free Industry Sorts, But Turning in Malware, Reports eSentire
• Apr 13 – [Kaspersky] Zero-day vulnerability in Desktop Window Supervisor (CVE-2021-28310) susceptible within the wild
• Apr 09 – [TrendMicro] Iron Tiger APT Updates Toolkit With Developed SysUpdate Malware
• Apr 08 – [CheckPoint] Iran’s APT34 Returns with an Up up to now Arsenal
• Apr 08 – [ESET] (Are you) afreight of the unlit? Peek out for Vyveva, recent Lazarus backdoor
• Apr 07 – [CISCO] Sowing Discord: Reaping the advantages of collaboration app abuse

Might per chance likely additionally

Might per chance likely additionally

Listed are essentially the most unhealthy APT attacks of the year 2019-2020, we help the checklist up up to now with the recent attacks reported on a fashioned foundation.

You furthermore might can agree to us on Linkedin, Twitter, Facebook for each day Cybersecurity and hacking knowledge updates